CVEvulnerability

CVE-2002-0250

7.5 HIGH Published 2002-05-29 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2002-05-29
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Web configuration utility in HP AdvanceStack hubs J3200A through J3210A with firmware version A.03.07 and earlier, allows unauthorized users to bypass authentication via a direct HTTP request to the web_access.html file, which allows the user to change the switch's configuration and modify the administrator password.

Affected configurations

• hp advancestack 10base-t switching hub j3200a a.03.07 • hp advancestack 10base-t switching hub j3201a a.03.07 • hp advancestack 10base-t switching hub j3202a a.03.07 • hp advancestack 10base-t switching hub j3203a a.03.07 • hp advancestack 10base-t switching hub j3204a a.03.07 • hp advancestack 10base-t switching hub j3205a a.03.07 • hp advancestack 10base-t switching hub j3210a a.03.07

References